CVE-2008-0650: SQL Injection

Published Feb 7, 2008

Updated

SQL injection vulnerability in login.php in Simple OS CMS 0.1c beta allows remote attackers to execute arbitrary SQL commands via the username field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

1 affected component

Simple OS CMS Simple OS CMS=0.1c_beta

Event History

Feb 7, 2008

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-0650?

CVE-2008-0650 is classified as a medium severity vulnerability due to its potential for SQL injection attacks.

How do I fix CVE-2008-0650?

To fix CVE-2008-0650, validate and sanitize user inputs in the login.php script to prevent SQL injection attacks.

What systems are affected by CVE-2008-0650?

CVE-2008-0650 affects Simple OS CMS version 0.1c beta.

Can CVE-2008-0650 be exploited remotely?

Yes, CVE-2008-0650 can be exploited remotely by attackers using crafted input in the username field.

What kind of attacks can CVE-2008-0650 facilitate?

CVE-2008-0650 can facilitate arbitrary SQL command execution, potentially leading to data leakage or manipulation.